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LOCATION-BASED COMMAND EXECUTION FOR MOBILE 
TELECOMMUNICATIONS TERMINALS 

Field of the Invention 

[oooi] The present invention relates to telecommunications in general, and, more 
particularly, to techniques for intelligently responding to a command issued by the user of a 
mobile telecommunications terminal. 

Background of the Invention 

[0003] Figure 1 depicts user 101 who is carrying mobile telecommunications terminal 
102 (e.g., a mobile telephone, a personal digital assistant [PDA], etc.) in accordance with 
the prior art. Mobile telecommunications terminal 102 wirelessly transmits signals to and 
receives signals from one or more wireless infrastructure nodes (e.g., a Code Division 
Multiple Access [CDMA] base station, an Institute of Electrical and Electronics Engineers 
[IEEE] 802.11 wireless access point, etc.). User 101 can move about and can enter 
commands into mobile telecommunications terminal 102 via one or more input mechanisms 
(e.g., keypad input, pen-based input, voice input, etc.). Mobile telecommunications 
terminal 102 also typically has one or more output transducers (e.g., liquid-crystal display, 
speaker, etc.) to present content (e.g., a web page, an audio clip, output of an executed 
query, etc.) to user 101. 

[0004] A local command issued by user 101 is a command that executes on mobile 
telecommunications terminal 102 and does not involve communication with any remote 
device. Examples of local commands include adjusting the volume of the speaker of mobile 
telecommunications terminal 102, editing information in a spreadsheet stored in disk 
memory in mobile telecommunications terminal 102, playing a Chess game residing in 
random-access memory in mobile telecommunications terminal 102, playing a sound clip 
stored on disk in mobile telecommunications terminal 102, capturing an image with a digital 
camera embedded in mobile telecommunications terminal 102, and capturing an acoustic 
signal with a microphone embedded in mobile telecommunications terminal 102. Local 
commands that involve accessing content stored at mobile telecommunications terminal 102 
(e.g., in random-access memory/ in disk storage, etc.) are also known as requests to access 
local content. 
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[0005] A remote command issued by user 101 is a command issued through mobile 
telecommunications terminal 102 that (i) executes on a remote device (e.g., a server, a 
mobile telecommunications terminal other than terminal 102, etc.), (ii) accesses data stored 
at a remote device, (iii) transmits data to a remote device, or (iv) any combination of (i), 
(ii), and (iii). Examples of remote commands include downloading a web page, issuing a 
query that searches a database that is stored on another device, sending an email message, 
and placing a telephone call. Remote commands that satisfy condition (ii) (i.e., that access 
information stored at a remote device) are also known as requests to access remote 
content. 

[0006] Some computing devices such as mobile telecommunications terminals, 
desktop personal computers (PCs), and servers require a user to log in to the device before 
allowing the user to use the device. For example, when a PC running the Linux or Windows 
XP operating system is powered on, the user is confronted with a log-in screen that asks for 
the user's username (also referred to as a screen name for Internet service providers such 
as AOL) and password. The user is not allowed to proceed past the start-up screen until he 
or she provides a valid username and password combination. 

[0007] Some computing devices provide, in addition to a log-in screen, one or more 
authorization mechanisms to restrict access to data, commands, or both. For example, PCs 
that run the Linux or Windows XP operating system enable a data file to be associated with 
a particular user or group of users, thereby allowing only the associated user(s) to access 
the data file. In some authorization mechanisms, separate read- and write-permissions can 
be associated with a data file, thereby partitioning users into four categories: (i) those who 
can read and write to the data file, (ii) those who can read the data file but cannot write to 
it, (iii) those who can write to the data file but cannot read it, and (iv) those who can 
neither read nor write to the data file. Furthermore, some authorization mechanisms enable 
a command (such as an executable file) to be associated with a particular user or group of 
users, thereby allowing only the associated user(s) to execute the command. 

Summary of the Invention 

[0002] The present invention enables the response to a command from a mobile 
telecommunications terminal to be at least partially based on the geo-location of the mobile 
telecommunications terminal when the command is issued. In some embodiments of the 
present invention, the response to the command is also at least partially based on one or 
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more additional factors (e.g., who the user is, the nature of the command, what the data is 
when the command is a query, the date and time [i.e., "calendrical time' 7 ], etc.). There are 
many situations in which this might be desirable. 

[0003] For example, Figure 2 depicts a map of a portion of a floor in a hospital. 
Perimeter 203-1 represents the walls of the floor and perimeters 203-2 through 203-5 
represent four of the rooms on the floor. Figure 2 also depicts user 101, a nurse who is 
carrying mobile telecommunications terminal 202 and who is inside room 203-2. Not shown 
in Figure 2 are the patients, beds, and medical equipment occupying rooms 203-2 through 
203-5. 

[0004] In some cases, it might be desirable to restrict wireless access to a patient's 
records when the mobile terminal is inside that patient's room. As another example, it 
might be desirable to allow a nurse to access only the records of patients assigned to him or 
her, in addition to the requirement that the nurse must be inside in the patient's room. It 
might also be desirable, for example, to allow (i) a nurse practitioner to access a patient's 
records from anywhere inside the hospital, but not outside the hospital, and (ii) a doctor to 
access a patient's records from any location {i.e., from both inside and outside the hospital). 
As yet another example, it might be desirable to allow a doctor to store certain patient 
information (e.g., blood pressure, pulse, etc.) via his or her mobile terminal only when the 
doctor is inside the patient's hospital room. 

[0005] Other locales at which the present invention might be desirable are libraries, 
military bases, banks, and museums. For example, it might be desirable to prevent people 
from placing a telephone call via their mobile telecommunications terminals while inside the 
library, except perhaps for one or more of the library staff. Similarly, a user accessing 
content (e.g., a news article, a web page, etc.) via his or her mobile terminal might 
automatically receive such content as synthesized speech except inside a library, where the 
content will be displayed as text. 

[0006] As another example, some military data (e.g., maximum speed of a 
Tomahawk missile, maximum range of a Harpoon missile, etc.) have both classified and 
unclassified versions. When a user issues a request to access such a datum via his or her 
mobile terminal, therefore, it might be desirable to automatically return the classified 
version when inside the military base, and the unclassified version when outside the military 
base. Similarly, a user on the military base might be able to access a particular classified 
datum only when inside one of a plurality of "closed areas" on the base. As another 
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example, a user might be able to access data stored on a server that resides in a particular 
closed area only when the user is physically inside that closed area. 

[0007] At a bank, it might be desirable to allow an employee of the bank to access, 
via his or her mobile terminal, a depositor's social security number only (i) when the 
employee is inside the bank, and (ii) during banking hours {e.g., 9:00 am to 3:00 pm 
during non-holiday weekdays, etc.). An employee might be allowed, however, to access a 
depositor's address from both inside and outside the bank at any date and time. Similarly, 
a bank employee might be able to access a depositor's balance from any location inside the 
bank when the balance is less than $1 million, but might only be able to access the 
depositor's balance inside a particular room reserved for "high net-worth client transactions" 
when the balance exceeds $1 million. As another example, when a teller deposits a check 
into a depositor's account, it might be desirable to display the new balance only when it is 
less than $1 million, and instead display "Deposit confirmed" when the balance exceeds $1 
million in order to protect the privacy of the depositor. Alternatively, instead of the "Deposit 
confirmed" message, an encoded version of the balance might be displayed, where the 
branch president knows the code, but the tellers do not, thus allowing the branch president 
and teller to enter a transaction together at a desktop PC and allowing only the branch 
president to know the balance of a high net-worth depositor. 

[0008] At a museum, it might be desirable to prevent people who have terminals that 
include a digital camera (e.g., a "cameraphone", etc.) from taking any pictures, except 
perhaps in the museum cafeteria. 

[0009] In the illustrative embodiment of the present invention, a mobile 
telecommunications terminal, upon receiving a remote command from the terminal's user, 
transmits the remote command to a server of the appropriate wireless infrastructure (e.g., a 
server connected to a CDMA base station, a server connected to an IEEE 802.11 wireless 
access point, etc.), and the server determines whether to execute the remote command 
based on the geo-location of the mobile telecommunications terminal, and optionally, on 
one or more additional factors, including: the identity of the user, the nature of the 
command (e.g., a query, a command to store data, a command to place a call, a command 
to transmit data, etc.), one or more arguments of a command (e.g., a filename, a command 
option, etc.), the value of a datum retrieved by a query, the geo-location at which a datum 
is stored, and calendrical time. If the server decides not to execute the remote command, it 
transmits a message (e.g., a text string, synthesized speech, etc.) to the mobile 
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telecommunications terminal that indicates that the remote command was refused. If the 
server does execute the remote command, then, if there are any products (e.g., a result 
value, etc.) of the command, the server determines, based on the geo-location and 
optionally one or more additional factors as described above, whether to suppress or encode 
one or more of these products. The server then transmits any unsuppressed products (both 
unchanged and encoded) to the mobile telecommunications terminal. 

[ooio] When a user issues a local command at a mobile telecommunications terminal 
in accordance with the illustrative embodiment, the terminal determines whether to execute 
the local command based on its geo-location, and optionally on one or more additional 
factors, as described above. If the mobile telecommunications terminal decides not to 
execute the local command, it outputs a message that indicates that the command was 
refused. If the mobile telecommunications terminal does execute the local command, then, 
if the command has any products, the terminal determines, based on the geo-location and 
optionally one or more additional factors as described above, whether to suppress or encode 
one or more of these products. The mobile telecommunications terminal then emits (e.g., 
visually displays, acoustically plays, etc.) any unsuppressed products (both unchanged and 
encoded) accordingly. 

[ooii] For the purposes of this specification, the term calendrical time" is defined 
as indicative of one or more of the following: 

(i) a time (e.g., 16:23:58, etc.), 

(ii) one or more temporal designations (e.g., Tuesday, Novemeber, etc.), 

(iii) one or more events (e.g., Thanksgiving, John's birthday, etc.), and 

(iv) a time span (e.g., 8:00-9:00, etc.). 

[0012] For the purposes of this specification, the term "local command" is defined 
as a command issued by the user of a mobile telecommunications terminal that is executed 
at the terminal and does not involve communication with any remote device. 

[0013] For the purposes of this specification, the term "request to access local 
content" is a local command issued by the user of a mobile telecommunications terminal 
that accesses only content stored at the mobile telecommunications terminal. 

[0014] For the purposes of this specification, the term "remote command" is 
defined as a command issued by the user of a mobile. telecommunications terminal that (i) 
executes on a remote device (e.g., a server, another mobile telecommunications terminal, 
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etc.), (ii) accesses data stored at a remote device, (iii) transmits data to a remote device, or 
(iv) any combination of (i)-(iii). 

[0015] For the purposes of this specification, the term "request to access remote 
content" is a remote command that satisfies condition (ii) (i.e., that accesses content 
stored at a remote device). 

[0016] In this specification, the term "command," without a modifier, might be used 
when context renders the issue of local versus remote unambiguous. For example, 
"transmitting a command from a mobile telecommunications terminal to a server" refers to 
a remote command, and "receiving a command at a terminal and executing the command at 
the terminal" refers to a local command. 

[0017] As in the case of "command," in this specification the term "request to 
access content," without a modifier, might be used when context renders the issue of local 
versus remote unambiguous. For example, "transmitting a request to access content from 
a mobile telecommunications terminal to a server" refers to a request to access remote 
content, and "receiving a request to access content at a terminal and accessing the content 
at that terminal" refers to a request to access local content. 

[0018] The illustrative embodiment comprises: (a) receiving (i) a command from a 
mobile telecommunications terminal, and (ii) the geo-location of the mobile 
telecommunications terminal; and (b) determining whether to execute the command based 
on the geo-location of the mobile telecommunications terminal. 

Brief Description of the Drawings 

[0019] Figure 1 depicts a user carrying a mobile telecommunications terminal in the 
prior art. 

[0020] Figure 2 depicts a user carrying a mobile telecommunications terminal in a 
hospital, in accordance with the illustrative embodiment of the present invention. 

[0021] Figure 3 depicts the salient components of telecommunications system 300, in 
accordance with the illustrative embodiment of the present invention. 

[0022] Figure 4 depicts an exemplary organization of information in database 305, as 
shown in Figure 3, in accordance with the illustrative embodiment of the present invention. 

[0023] Figure 5 depicts a block diagram of the salient components of mobile 
telecommunications terminal 202, as shown in Figures 2 and 3, in accordance with the 
illustrative embodiment of the present invention. 
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[0024] Figure 6 depicts a block diagram of the salient components of wireless access 
point 303, as shown in Figure 3, in accordance with the illustrative embodiment of the 
present invention. 

[0025] Figure 7 depicts a block diagram of the salient components of server 304, as 
shown in Figure 3, in accordance with the illustrative embodiment of the present invention. 

[0026] Figure 8 depicts the operation of mobile telecommunications terminal 202 and 
server 304 in response to a remote command input at mobile telecommunications terminal 
202, in accordance with the illustrative embodiment of the present invention. 

[0027] Figure 9 depicts the operation of mobile telecommunications terminal 202 in 
response to a local command input at mobile telecommunications terminal 202, in 
accordance with the illustrative embodiment of the present invention. 

[0028] Figure 10 depicts the operation of mobile telecommunications terminal 202 
and server 304 in response to a request to access remote content at mobile 
telecommunications terminal 202, in accordance with the illustrative embodiment of the 
present invention. 

[0029] Figure 11 depicts the operation of mobile telecommunications terminal 202 in 
response to a request to access local content at mobile telecommunications terminal 202, in 
accordance with the illustrative embodiment of the present invention. 

Detailed Description 

[0030] Figure 3 depicts the salient components of telecommunications system 300 in 
accordance with the illustrative embodiment of the present invention. As shown in Figure 3, 
telecommunications system 300 comprises mobile telecommunications terminal 202, 
wireless access point 303, server 304, and database 305, interconnected as shown. As will 
be appreciated by those skilled in the art, in some embodiments wireless access point 303 
might be replaced with a cellular {e.g., CDMA, GSM, etc.) base station and might be located 
several miles away from telecommunications system 300. 

[0031] Mobile telecommunications terminal 202 wirelessly transmits signals to and 
receives signals from wireless access point 303 in well-known fashion. In addition, mobile 
telecommunications terminal 202 has one or more input mechanisms {e.g., keypad input, 
pen-based input, voice input, etc.) through which user 101 can enter commands (e.g., place 
a telephone call, access a webpage, access information in a database, etc.), as is well- 
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known in the art. It will be clear to those skilled in the art, after reading this disclosure, 
how to make and use mobile telecommunications terminal 202. 

[0032] Wireless access point 303 wirelessly transmits signals to and receives signals 
from mobile telecommunications terminal 202, and possibly other mobile 
telecommunications terminals, in well-known fashion. As will be appreciated by those 
skilled in the art, in some embodiments wireless access point 303 might operate in 
accordance with a local-area network protocol (e.g., IEEE 802.11 ["Wi-Fi"], etc.), while in 
some embodiments wireless access point 303 might operate in accordance with a 
metropolitan-area network protocol (e.g., IEEE 802.16 ["Wi-Max"], etc.). It will be clear to 
those skilled in the art, after reading this disclosure, how to make and use wireless access 
point 303. 

[0033] Server 304 is a computer that receives requests from client devices and 
performs one or more computing tasks in response to these requests, as is well-known in 
the art. As shown in Figure 3, server 304 sends signals to and receives signals from (i) 
wireless access point 303 via wired connection 306, and (ii) database 305 via wired 
connection 307, in well-known fashion. It will be clear to those skilled in the art, after 
reading this disclosure, how to make and use server 304. 

[0034] Database 305 stores information for a plurality of users, a plurality of 
commands, and a plurality of geographic perimeters (e.g., a room, a floor in a hospital, a 
circle with a radius of five feet centered at a particular medical apparatus, etc.), where the 
information indicates whether particular users are authorized to execute particular 
commands from particular geo-locations, and if so authorized, whether one or more 
products of a command should be suppressed or encoded, as described above. In addition, 
database 305 stores geometric information that defines a plurality of perimeters. 

[0035] Figure 4 depicts an exemplary organization of information in database 305 in 
accordance with the illustrative embodiment of the present invention. As shown in Figure 4, 
database 305 comprises: command authorization table 401, content version table 402, rule 
list 403, and geometric information table 404. 

[0036] Command authorization table 401 contains a list of allowed commands for 
various user/ peri meter combinations; if a particular command/user/perimeter combination 
is not in command authorization table 401, then that combination is not allowed. (As will 
be appreciated by those skilled in the art, in some embodiments it might be advantageous 
to instead enumerate the non-permissible combinations in command authorization table 
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401.) Command authorization table 401 also indicates, when appropriate, whether any 
particular products of the command should be suppressed or encoded, as described above. 

[0037] As shown in Figure 4, some entries of command authorization table 401 are 
associated with a conditional rule in rule list 403. For commands that access the value 
associated with a descriptor (e.g., the value associated with descriptor "pulse" for a 
particular patient, etc.), rule list 403 might contain rules that determine authorization based 
on the particular value stored (e.g., pulse <= 180, etc.), the descriptor itself, or both. 

[0038] Content version table 402 indicates which version of content is accessible for 
particular content/user/perimeter combinations. For example, the first row of content 
version table 402 in Figure 4 indicates that when user MajJSmith accesses content 
FISMaxSpeed , he gets the classified version when inside perimeter FortMonmouth and the 
unclassified version when outside perimeter FortMonmouth. 

[0039] Geometric information table 404 defines the perimeters referenced in 
command authorization table 401 and content version table 402. As shown in Figure 4, a 
perimeter might be a polygon defined by an ordered list of vertices, a circle defined by its 
center and radius, etc. As will be appreciated by those skilled in the art, a perimeter 
associated with a particular entry in command authorization table 401 or content version 
table 402 might represent a particular room with limited access, an area in which a 
computer that stores the pertinent content is located, etc. 

[0040] As will be appreciated by those skilled in the art, in some embodiments 
database 305 might also include information that classifies users into groups (e.g., nurses, 
doctors, etc.) and might encode authorization information in database 305 with respect to 
these groups as well as with respect to individual users. As will also be appreciated by 
those skilled in the art, in some embodiments database 305 might reside in a database 
server that is separate from server 304, while in some other embodiments database 305 
might be stored in server 304 itself; furthermore, in the second illustrative embodiment of 
the present invention, described below, some or all of the authorization and geometric 
information of database 305 is instead stored in mobile telecommunications terminal 202. 
It will be clear to those skilled in the art, after reading this disclosure, how to make and use 
database 305. 

[0041] Figure 5 depicts a block diagram of the salient components of mobile 
telecommunications terminal 202 in accordance with the illustrative embodiment of the 
present invention. As shown in Figure 5, mobile telecommunications terminal 202 



- 9 of 23 - 



Attorney Docket: 630-067US 
Avaya Docket: 501034-M-01-US 

comprises receiver 501, processor 502, memory 503, transmitter 504, GPS receiver 505, 
input/output interface 506, and clock 507, interconnected as shown. 

[0042] Receiver 501 receives signals wirelessly from wireless access point 303 and 
forwards the information encoded in these signals to processor 502, in well-known fashion. 
It will be clear to those skilled in the art, after reading this disclosure, how to make and use 
receiver 501. 

[0012] Processor 502 is a general-purpose processor that is capable of executing 
instructions stored in memory 503, of reading data from and writing data into memory 503, 
and of executing the tasks described below and with respect to Figures 8 through 11. In 
some alternative embodiments of the present invention, processor 202 might be a special- 
purpose processor. In either case, it will be clear to those skilled in the art, after reading 
this disclosure, how to make and use processor 502. 

[0043] Memory 503 stores data and executable instructions, as is well-known in the 
art, and might be any combination of random-access memory (RAM), flash memory, disk 
drive, etc. It will be clear to those skilled in the art, after reading this disclosure, how to 
make and use memory 503. 

[0044] Transmitter 504 receives information from processor 502 and wirelessly 
transmits signals that encode this information to wireless access point 303, in well-known 
fashion. It will be clear to those skilled in the art, after reading this disclosure, how to make 
and use transmitter 504. 

[0045] Global Positioning System (GPS) receiver 505 receives satellite-based signals 
and determines geo-location, as is well understood in the art, and forwards the geo-location 
to processor 420. It will be clear to those skilled in the art that some embodiments might 
employ means other than satellite-based signals for determining geo-location (e.g., 
triangulation, radio beacons, radio-frequency fingerprinting [U.S. Patent 6,393,294, 
incorporated by reference], etc.) In such embodiments, an appropriate receiver (e.g., radio- 
frequency receiver, etc.) would be substituted for GPS receiver 505, as is well understood in 
the art. 

[0046] Input/output interface 506 (i) receives input signals from the user of mobile 
telecommunications terminal 202 and forwards corresponding signals to processor 502, and 
(ii) receives signals from processor 502 and emits corresponding output signals that can be 
sensed by the user, in well-known fashion. As will be appreciated by those skilled in the art, 
the input mechanism of input/output interface 506 might be a keypad, touchscreen, 
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microphone, etc., and the output mechanism of input/output interface 506 might be a 
liquid-crystal display (LCD), speaker, etc. 

[0047] Clock 507 transmits the current time, date, and day of the week to processor 
502 in well-known fashion. 

[0048] Figure 6 depicts a block diagram of the salient components of wireless access 
point 303 in accordance with the illustrative embodiment of the present invention. As 
shown in Figure 6, wireless access point 303 comprises receiver 601, processor 602, 
memory 603, and transmitter 604, interconnected as shown. 

[0049] Receiver 601 receives signals wirelessly from mobile telecommunications 
terminal 202, and possibly other mobile telecommunications terminals, and forwards the 
information encoded in these signals to processor 602, in well-known fashion. It will be 
clear to those skilled in the art, after reading this disclosure, how to make and use receiver 
601. 

[0013] Processor 602 is a general-purpose processor that is capable of executing 
instructions stored in memory 603, of reading data from and writing data into memory 603, 
of forwarding information received from mobile telecommunications terminal 202 to server 
304, of receiving information from server 304, and of executing the tasks described below 
and with respect to Figures 9 and 11. In some alternative embodiments of the present 
invention, processor 602 might be a special-purpose processor. In either case, it will be 
clear to those skilled in the art, after reading this disclosure, how to make and use processor 
602. 

[0050] Memory 603 stores data and executable instructions, as is well-known in the 
art, and might be any combination of random-access memory (RAM), flash memory, disk 
drive, etc. It will be clear to those skilled in the art, after reading this disclosure, how to 
make and use memory 603. 

[0051] Transmitter 604 receives information from processor 602 and wirelessly 
transmits signals that encode this information to mobile telecommunications terminal 202, 
in well-known fashion. It will be clear to those skilled in the art, after reading this 
disclosure, how to make and use transmitter 604. 

[0052] Figure 7 depicts a block diagram of the salient components of server 304 in 
accordance with the illustrative embodiment of the present invention. As shown in Figure 7, 
server 304 comprises processor 702 memory 703, and clock 707, interconnected as shown. 
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[0053] Processor 702 is a general-purpose processor that is capable of executing 
instructions stored in memory 703, of reading data from and writing data into memory 703, 
of transferring information to and from wireless access point 303, and of executing the tasks 
described below and with respect to Figures 9 and 11. In some alternative embodiments of 
the present invention, processor 702 might be a special-purpose processor. In either case, 
it will be clear to those skilled in the art, after reading this disclosure, how to make and use 
processor 702. 

[0054] Memory 703 stores data and executable instructions, as is well-known in the 
art, and might be any combination of random-access memory (RAM), flash memory, disk 
drive, etc. It will be clear to those skilled in the art, after reading this disclosure, how to 
make and use memory 703. 

[0055] Clock 707 transmits the current time, date, and day of the week to processor 
702 in well-known fashion. 

[0056] Figure 8 depicts the operation of mobile telecommunications terminal 202 and 
server 304 in response to a remote command input at mobile telecommunications terminal 
202, in accordance with the illustrative embodiment of the present invention. It will be 
clear to those skilled in the art which tasks depicted in Figure 8 can be performed 
simultaneously or in a different order than that depicted. 

[0057] At task 810, mobile telecommunications terminal 202 transmits to server 304, 
via wireless access point 303: (i) a remote command C that was input by the user of mobile 
telecommunications terminal 202, (ii) an identifier U that indicates the user of mobile 
telecommunications terminal 202 (e.g., a username, etc.), and (iii) the geo-location L of 
mobile telecommunications terminal 202, in well-known fashion. In some embodiments in 
which mobile telecommunications terminal 202 is used by a single user only, the identifier 
might indicate the terminal itself, while in embodiments in which different users might use 
mobile telecommunications terminal 202, the user could identify himself or herself by 
initially "logging in" to the terminal. 

[0058] At task 815, server 304 receives, via wireless access point 303, remote 
command C, identifier U, and geo-location L, in well-known fashion. 

[0059] At task 825, server 304 determines whether to execute remote command C 
based on geo-location L, identifier U, remote command C, and, if necessary, calendrical 
time. In particular, processor 702 consults database 305 and determines, based on the 
contents of command authorization table 401, rule list 403, and geometric information 
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table 404, whether the command should be executed. This determination involves 
identifying the pertinent table rows and rules, which, as will be appreciated by those skilled 
in the art, can be performed in a variety of ways, and then applying this information 
accordingly. If processor 702 determines that remote command C should not be executed, 
the method of Figure 8 continues at task 835; otherwise the method of Figure 8 proceeds to 
task 845. 

[0060] At task 835, server 304 transmits to mobile telecommunications terminal 202, 
via wireless access point 303, an output that indicates that the execution of remote 
command C was refused. After completion of task 835, the method of Figure 8 continues at 
task 890. 

[0061] At task 845, processor 702 of server 304 executes remote command C, in 
well-known fashion. 

[0062] At task 855, server 304 determines whether to suppress or encode any 
products of remote command C based on geo-location L, identifier U, remote command C, 
and, if specified by an appropriate rule in rule list 403, calendrical time. Processor 702 
performs task 855 based on the pertinent table row(s) and rule(s) of database 305, as in 
task 835. If processor 702 determines that no products should be suppressed or encoded, 
the method of Figure 8 continues at task 865; otherwise the method of Figure 8 proceeds to 
task 875. 

[0063] At task 865, server 304 transmits to mobile telecommunications terminal 202, 
via wireless access point 303, the products of remote command C, in well-known fashion. 
After completion of task 835, the method of Figure 8 continues at task 890. 

[0064] At task 875, processor 702 of server 304 encodes the appropriate products of 
remote command C, in well-known fashion. After completion of task 875, the method of 
Figure 8 continues at task 885. 

[0065] At task 885, server 304 transmits to mobile telecommunications terminal 202, 
via wireless access point 303, unsuppressed products of remote command C (both encoded 
and un-encoded), in well-known fashion. After completion of task 885, the method of 
Figure 8 continues at task 890. 

[0066] At task 890, mobile telecommunications terminal 202 receives, via wireless 
access point 303, output from server 304, in well-known fashion. After task 890 the method 
of Figure 8 terminates. 
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[0067] Figure 9 depicts the operation of mobile telecommunications terminal 202 in 
response to a local command input at mobile telecommunications terminal 202, in 
accordance with the illustrative embodiment of the present invention. It will be clear to 
those skilled in the art which tasks depicted in Figure 9 can be performed simultaneously or 
in a different order than that depicted. 

[0068] At task 910, processor 502 of mobile telecommunications terminal 202 
receives, in well-known fashion, (i) an identifier U that indicates the user of mobile 
telecommunications terminal 202 (e.g., a username, etc.); (ii) a local command Cfrom the 
user via input/output interface 506; and (iii) the geo-location L of mobile 
telecommunications terminal 202 via GPS receiver 505. 

[0069] At task 920, mobile telecommunications terminal 202 determines whether to 
execute local command C based on geo-location L, identifier U, local command C, and, if 
necessary, calendrical time. In particular, processor 502 consults data stored in memory 
503 (/.e., corresponding versions of command authorization table 401, rule list 403, and 
geometric information table 404 in database 305 of the first illustrative embodiment) and 
determines, based on the contents of memory 503, whether the command should be 
executed, as in task 825 of the first illustrative embodiment. If processor 502 determines 
that local command C should not be executed, the method of Figure 9 continues at task 
930; otherwise the method of Figure 9 proceeds to task 950. 

[0070] At task 930, mobile telecommunications terminal 202 emits, via input/output 
interface 506, an output signal (e.g., text message, audible sound, etc.) that indicates that 
the execution of local command C was refused. After completion of task 930, the method of 
Figure 9 terminates. 

[0071] At task 950, processor 502 of mobile telecommunications terminal 202 
executes local command C, in well-known fashion. 

[0072] At task 960, server 304 determines whether to suppress or encode any 
products of local command C based on geo-location L, identifier U, command C, and, if 
necessary, calendrical time. Processor 502 performs task 960 based on the pertinent table 
row(s) and rule(s) of memory 503, as in task 920. If processor 502 determines that no 
products should be suppressed or encoded, the method of Figure 9 continues at task 960; 
otherwise the method of Figure 9 proceeds to task 970. 
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[0073] At task 960, mobile telecommunications terminal 202 emits, via input/output 
interface 506, the products of local command C, in well-known fashion. After completion of 
task 960, the method of Figure 9 terminates. 

[0074] At task 970, processor 502 of mobile telecommunications terminal 202 
encodes the appropriate products of local command C, in well-known fashion. After 
completion of task 970, the method of Figure 9 continues at task 980. 

[0075] At task 980, mobile telecommunications terminal 202 emits, via input/output 
interface 506, an output signal comprising the unsuppressed products of local command C 
(both encoded and un-encoded), in well-known fashion. After task 980 the method of 
Figure 9 terminates. 

[0076] Figure 10 depicts the operation of mobile telecommunications terminal 202 
and server 304 in response to a request to access remote content at mobile 
telecommunications terminal 202, in accordance with the illustrative embodiment of the 
present invention. It will be clear to those skilled in the art which tasks depicted in Figure 
10 can be performed simultaneously or in a different order than that depicted. 

[0077] At task 1010, mobile telecommunications terminal 202 transmits to server 
304, via wireless access point 303: (i) a request to access remote content K that was input 
by the user of mobile telecommunications terminal 202, (ii) an identifier U that indicates the 
user of mobile telecommunications terminal 202 (e.g., a username, etc.), and (iii) the geo- 
location L of mobile telecommunications terminal 202, in well-known fashion. In some 
embodiments in which mobile telecommunications terminal 202 is used by a single user 
only, the identifier might indicate the terminal itself, while in embodiments in which 
different users might use mobile telecommunications terminal 202, the user could identify 
himself or herself by initially "logging in" to the terminal. 

[0078] At task 1015, server 304 receives, via wireless access point 303, the request 
to access remote content K, identifier U, and geo-location L, in well-known fashion. 

[0079] At task 1025, server 304 determines the appropriate version of content K 
accessible to user U at geo-location L based on content version table 402, rule list 403, 
geometric information table 404, and, if necessary, calendrical time, in a manner similar to 
task 825 above. 

[0080] At task 1035, processor 702 of server 304 retrieves the appropriate version of 
content K (e.g., from database 305, from memory 703, etc.) and transmits, via wireless 
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access point 303, this content to mobile telecommunications terminal 202 in well-known 
fashion. After completion of task 1035, the method of Figure 10 continues at task 1050. 

[0081] At task 1050, mobile telecommunications terminal 202 receives, via wireless 
access point 303, content from server 304 in well-known fashion. After task 1050 the 
method of Figure 10 terminates. 

[0082] Figure 11 depicts the operation of mobile telecommunications terminal 202 in 
response to a request to access local content at mobile telecommunications terminal 202, in 
accordance with the illustrative embodiment of the present invention, in which the 
alternative version(s) of the content is (are) also stored locally at mobile 
telecommunications terminal 202. It will be clear to those skilled in the art which tasks 
depicted in Figure 11 can be performed simultaneously or in a different order than that 
depicted. 

[0083] At task 1110, processor 502 of mobile telecommunications terminal 202 
receives, in well-known fashion, (i) an identifier U that indicates the user of mobile 
telecommunications terminal 202 (e.g., a username, etc.); (ii) a local request from the user, 
via input/output interface 506, to access content K; and (iii) the geo-location L of mobile 
telecommunications terminal 202 via GPS receiver 505. 

[0084] At task 1120, mobile telecommunications terminal 202 determines the 
appropriate version of content K accessible to user U at geo-location L. In particular, 
processor 502 consults data stored in memory 503 (i.e., corresponding versions of content 
version table 402 and geometric information table 404 in database 305 of the first 
illustrative embodiment), retrieves the calendrical time from clock 506 if necessary, and 
determines the appropriate version of content K in a manner similar to task 1025 above. 

[0085] At task 1130, mobile telecommunications terminal 202 emits, via 
input/output interface 506, an output signal comprising the appropriate content, in well- 
known fashion. After task 1130 the method of Figure 11 terminates. 

[0086] It is to be understood that the above-described embodiments are merely 
illustrative of the present invention and that many variations of the above-described 
embodiments can be devised by those skilled in the art without departing from the scope of 
the invention. It is therefore intended that such variations be included within the scope of 
the following claims and their equivalents. 

[0087] What is claimed is: 
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